Skip to content
Threat Feed
Subscribe

Product

Commons-Server (< 9.7.0)

1 brief RSS
high advisory

Unauthenticated Admin API Exposure in Mockoon

Mockoon versions before 9.7.0 expose an unauthenticated, CORS-misconfigured admin API by default, allowing attackers to exfiltrate environment variables, hijack mock responses, and perform cross-origin secret theft.

commons-server +1 webserver vulnerability cve
3t 1c